livekit
diff --git a/‎sdp/offer.go‎
Lines changed: 3 additions & 0 deletions b/‎sdp/offer.go‎
Lines changed: 3 additions & 0 deletions
@@ -625,6 +625,9 @@ func parseSRTPProfile(val string) (*srtp.Profile, error) {
 		if err != nil {
 			return nil, err
 		}
+		if keyLen > len(keys) {
+			return nil, fmt.Errorf("parsed key length is greater than key buffer size: keyLen: %d; len(keys): %d", keyLen, len(keys))
+		}
 		keys, salt = keys[:keyLen], keys[keyLen:]
 	}
 	return &srtp.Profile{
Original file line number	Diff line number	Diff line change
`@@ -625,6 +625,9 @@ func parseSRTPProfile(val string) (*srtp.Profile, error) {`
`625`	`625`	`if err != nil {`
`626`	`626`	`return nil, err`
`627`	`627`	`}`
	`628`	`+ if keyLen > len(keys) {`
	`629`	`+ return nil, fmt.Errorf("parsed key length is greater than key buffer size: keyLen: %d; len(keys): %d", keyLen, len(keys))`
	`630`	`+ }`
`628`	`631`	`keys, salt = keys[:keyLen], keys[keyLen:]`
`629`	`632`	`}`
`630`	`633`	`return &srtp.Profile{`